senior-backend

Implement Express and Sequelize APIs for secure superadmin backend operations.

Updated Apr 4, 2026
One-click install
npx skills add https://github.com/Leandelosantos/huevos-point-maestro --skill senior-backend-leandelosantos
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: senior-backend
Source: https://github.com/Leandelosantos/huevos-point-maestro/tree/main/.claude/skills/senior-backend
Command: npx skills add https://github.com/Leandelosantos/huevos-point-maestro --skill senior-backend-leandelosantos

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Streamlines the Dashboard Maestro backend by outlining the Express + Sequelize serverless API surface, JWT superadmin authentication, Neon PostgreSQL connections, tenant metric queries, and cross-app access token flow so you avoid wiring these security-critical pieces manually.

Core Features & Use Cases

  • Secure Authentication and Auditing: Enforces role=superadmin logins, rate limits, and audit logging in superadmin_audit_log while ensuring tenant_id always comes from JWT or route parameters.
  • Tenant Metrics APIs: Provides endpoints for tenant lists with daily metrics, detailed tenant data, today-specific sales and expenses, and access tokens that auto-login into the business app.
  • Automation and Learning Materials: Bundles api_scaffolder, database_migration_tool, and api_load_tester scripts plus comprehensive references on API design, database optimization, and backend security practices for production-ready improvements.

Quick Start

Use python scripts/api_scaffolder.py with your project path to bootstrap the API scaffolding.

Frequently Asked Questions about senior-backend

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build secure Express APIs for multi-tenant metrics?▼

Secure Express APIs for multi-tenant metrics are built using Sequelize queries and JWT authentication. This enforces role=superadmin logins, rate limits, and audit logging into a superadmin_audit_log table to protect tenant data.

What is the best way to set up JWT superadmin authentication for a dashboard?▼

JWT superadmin authentication for a dashboard requires setting a JWT_SECRET parity with your business app. This ensures access tokens properly auto-login auditors and ops teams while securely routing tenant_id from JWT claims.

How do I scaffold a serverless API with Express and Sequelize?▼

Scaffold a serverless API with Express and Sequelize by running the api_scaffolder script. This bootstraps your project path with Vercel serverless endpoints to serve tenant metric lists and detail views.

Can I run database migrations with Sequelize on Neon PostgreSQL?▼

Database migrations with Sequelize on Neon PostgreSQL are supported using the bundled database_migration_tool script. This allows you to manage schema changes for your multi-tenant metrics tables efficiently.

Does Express rate limiting work with Vercel serverless functions?▼

Express rate limiting works with Vercel serverless functions to protect superadmin endpoints. Combined with audit logging, it secures operations by tracking actions in the superadmin_audit_log table.

Why do I need audit logging for backend API operations?▼

Audit logging for backend API operations is needed to track secure superadmin actions. It records events into a superadmin_audit_log table, ensuring accountability for auditors and ops teams accessing tenant metrics.